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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (currently amended) A method of distributing digitiallv digitally 

encoded data, comprisingi 




a) dividing said data into a multiplicity of frames, 



b) encrypting said frames, 

c) distributing multiple copies of the said data frames to a multipUcity of 
users, each frame being distributed with a control field, 

d) communicating a seed value for key generation to respective secure 
modules located at each of the multipUcity of users, 

e) decoding the data frames at respective users using keys derived from the 
seed value communicated to the secure module, the secure module being arranged to 
enable decryption of a respective frame only when said control field has been passed to 
the secure module, 

f) passing a control message , for modifying and controlling the availabiUty of 
keys, in the control field to the secure module at a selected one or more of the multiplicity 
ef-users, 

g) at the secure module of the or each selected user, in response to the said 
control message, controlling the availability of keys generated from the said seed value, 
thereby controlling access by the users to the said data. 
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2-3. (canceled) 

4. (previously amended) A method according to claim 1, in which each 
data frame includes a frame identity field, and each key generated by the secure module 
is specific to one frame identified by the said field. 

5. (previously amended) A method according to claim 1, in which the 
step of distributing multiple copies of the said data comprises multicasting packets of 
data via a communications network to the pluraUty of users. 

6. (previously amended) A method according to claim 1, in which the 
control message is distributed with a data frame to the multiplicity of users, a user 
identity field identifying a selected user or group of users is included in the control 
message, and the control message is acted on only by the user or group of users identified 
by the said user identity field. 

7. (previously amended) A method according to claim 1, in which the 
control message includes a stop flag, and in response to the stop flag the generation of 
keys at the or each selected user is stopped. 

8. (previously amended) A method according to claim 1, including 
returning a response signal from the secure module to the source of the control message. 
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9. 



(original) A method according to claim 8, in which the control message 



includes a contact sender flag, and the step of returning a response signal from the secure 
module is carried out when the contact sender flag is set. 



transmitting a further control message to the user on receipt of the said response signal. 



data communications system, the method comprising: 

a) receiving at the customer terminal a multiplicity of encrypted data frames^ 
each with a control field; 

b) receiving at the customer terminal a seed value for key generation; 

c) passing the said seed value for key generation to a secure module 
located at the customer terminal; 

d) generating in the secure module using the seed value keys for the 
decryption of data frames; 

e) decrypting the data frames using the said keys only those respective data 
frames for which a control field has been received ; 

f) passing to the said secure module a control message received from a source 
remote from the customer terminal in the control field ; and 



10. (previously amended) 



A method according to claim 8, including 



1 1 . (currently amended) 



A method of operating a customer terminal in a 
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g) in response to the said control message^ controlling the availability of keys 
generated using the said seed value and thereby controlling access by the user of the 
customer terminal to data received at the customer terminal. 

12. (currently amended) A data communications system comprising^ 

a) a remote data source arranged to output a plurality of frames; 

b) encryption means for encrypting the plurality of frames with different 
respective keys; 

c) a communications channel arranged to distribute multiple copies of the 
encrypted data frames , each with a control field ; 

d) a multiplicity of customer terminals arranged to receive from the 
communications channel respective copies of the encrypted data frames with the control 
fields ; 

e) a key generator located at a customer terminal and programmed to generate 
from a seed value keys for use in decrypting data framesr; 

f) key control means connected to the key generator, the key control means 
comprising: 

an interface for receiving the control fields messages ; and 
control means responsive conti'ol means arranged to only release keys for 
decrypting those respective frames for which a control field is received and being 
arranged to. in response to the said control messages and arrange to in the control 
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fields, control the availabiltiy availability to the user of keys generated from the 
seed value; and 

g) decryption means connected to the key generator and arrange to decrypt the 
data frames received at the customer terminal from the communications channel. 

13. (original) A data communications system according to claim 12, in 
which the communications channel is a packet-switched data network. 

14. (currently amended) A customer terminal for use in a method 
according to claim 1, the customer terminal comprising: 

a) a data interface for connection to a data conraiunications channel; 

b) a key generator programmed to generate from a seed value keys for use in 
decrypting data frames: 

c) decryption means connected to the data interface and the key generator and 
arranged to decrypt data frames received via the data interface: and 

ed) key control means connected to the key generator, the key control 
means comprising: 

an interface for receiving control messages fields ; and 

control means responsive to the said control messages and arrange to only release 
keys for decrypting those respective data frames received with a control field; 
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the control means being arranged to in response to control messages in the control 
fields, control the availability to the user keys generated from the seed value. controi the 
availabiltiy to the user of keys generated from the seed value; and 

d) decryption means connected to the data interface and to the key generator 

and anange to decrypt data frames received via the data interface. 

15. (currently amended) A data server for use in method according to 
claim 1, the data server comprising: 

a) a data interface for connection to a data communications channelr-; 

b) means for outputting encrypted data frames with control fields via the data 
interface onto the conununications channel for receipt by a multiplicity of customer 
terminals; 

c) means for outputting the control fields having control mesages messages 
onto a data communications channel for controlling the operation of key generators at 
customer terminals. 

16. (previously amended) A method according to claim 1, including 
generating keys from the seed value by iterated operations on the seed value by selected 
ones of a plurality of predetermined functions. 

17-20. (canceled) 
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21. (previously amended) A method according to claim 1, including 
applying different characteristic variations to data decrypted at different respective 
customer terminals. 



22. (currently amended) A method or system according to claim 1, 
including a plurality of remote data sources, each outputting a respective plurality of 
frames. 

23. (currently amended) A method or system according to claim 22, in 
which the customer terminal receives a primary seed value common to different 
respective data streams from the plurality of data sources, and derives from the common 
primary key a plurality of different respective secondary seed values for decrypting 
frames from different respective data sources. 



24. (currently amended) A method or syst e m according to claim 23, in 

which data received from different data sources includes different respective source 
identity values, and the respective secondary seed value is generated from the primary 
seed value by modifying the primary seed value with the source identity value. 



25. (previously amended) A method according to claim 1, in which each 
data frame includes a frame type field. 
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26. (original) A method according to claim 25, including storing a receipt 
including data from the frame type field. 




27-28. (canceled) 



29. (new) A method as in claim 1, wherein the control message received by the 
secure module causes the secure module to cease releasing keys. 

30. (new) A method as in claim 11, wherein the control message received by 
the secure module causes the secure module to cease releasing keys. 

31. (new) A data communications system as in claim 12, wherein the control 
message received by the key control means causes the key control means to cease 
releasing keys. 
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